STIGQter: STIG Summary: Samsung OS 9 with Knox 3.x COBO Use Case KPE(AE) Deployment Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 24 Apr 2020:

Samsung Android must be configured to enforce that Wi-Fi Sharing is disabled.

DISA Rule

SV-102993r1_rule

Vulnerability Number

V-92905

Group Title

PP-MDF-991000

Rule Version

KNOX-09-000820

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Configure Samsung Android to disable Wi-Fi Sharing.

Mobile Hotspot must be enabled in order to enable Wi-Fi Sharing. If the AO has not approved Mobile Hotspot, and it has been disabled on the MDM console, the following guidance is not applicable.

On the Samsung Android device, do the following:
1. Open Settings.
2. Tap "Connections".
3. Tap "Mobile Hotspot and Tethering".
4. Tap "Mobile hotspot".
5. Disable "Wi-Fi sharing" if it is enabled.

Check Contents

Review device configuration settings to confirm Wi-Fi Sharing is disabled.

Mobile Hotspot must be enabled in order to enable Wi-Fi Sharing. If the Authorizing Official (AO) has not approved Mobile Hotspot, and it has been verified as disabled on the MDM console, the following guidance is not applicable.

This setting cannot be managed by the MDM administrator and is a User-Based Enforcement (UBE) requirement.

On the Samsung Android device, do the following:
1. Open Settings.
2. Tap "Connections".
3. Tap "Mobile Hotspot and Tethering".
4. Tap "Mobile hotspot".
5. Verify that "Wi-Fi sharing" is disabled.

If on the Samsung Android device "Wi-Fi sharing" is enabled, this is a finding.

Vulnerability Number

V-92905

Documentable

False

Rule Version

KNOX-09-000820

Severity Override Guidance

Review device configuration settings to confirm Wi-Fi Sharing is disabled.

Mobile Hotspot must be enabled in order to enable Wi-Fi Sharing. If the Authorizing Official (AO) has not approved Mobile Hotspot, and it has been verified as disabled on the MDM console, the following guidance is not applicable.

This setting cannot be managed by the MDM administrator and is a User-Based Enforcement (UBE) requirement.

On the Samsung Android device, do the following:
1. Open Settings.
2. Tap "Connections".
3. Tap "Mobile Hotspot and Tethering".
4. Tap "Mobile hotspot".
5. Verify that "Wi-Fi sharing" is disabled.

If on the Samsung Android device "Wi-Fi sharing" is enabled, this is a finding.

Check Content Reference

M

Target Key

3495

Comments